Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

APIFuzzer analyzes your API specifications and systematically tests the fields to ensure your application can handle modified parameters, all without the need for programming. It allows you to import API definitions from either local files or remote URLs, supporting both JSON and YAML formats. Every HTTP method is accommodated, and it can fuzz the request body, query strings, path parameters, and request headers. Utilizing random mutations, it also integrates seamlessly with continuous integration systems. The tool can produce test reports in JUnit XML format and has the capability to send requests to alternative URLs. It supports HTTP basic authentication through configuration settings and stores reports of any failed tests in JSON format within a designated folder, thus ensuring that all results are easily accessible for review. Additionally, this enhances your ability to identify vulnerabilities and improve the reliability of your API.

Description

Without access to source code, discover and certify security weaknesses in any product. Any protocol or hardware can be tested with beSTORM. This includes those used in IoT and process control, CANbus-compatible automotive and aerospace. Realtime fuzzing is possible without needing access to the source code. There are no cases to download. One platform, one GUI to use, with more than 250+ pre-built protocol testing modules, and the ability to create custom and proprietary ones. Identify security flaws before deployment. These are the ones that are most commonly discovered by outside actors after release. In your own testing center, certify vendor components and your applications. Software module self-learning and propriety testing. Scalability and customization for all business sizes. Automate the generation and delivery of near infinite attack vectors. Also, document any product failures. Record every pass/fail and manually engineer the exact command that caused each failure.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

API Blueprint
Arize Phoenix
BudgetML
CircleCI
Git
GitHub
GraphQL
JSON
JUnit
OneDev
OpenAPIHub
Python
Spark NLP
Swagger
XML

Integrations

API Blueprint
Arize Phoenix
BudgetML
CircleCI
Git
GitHub
GraphQL
JSON
JUnit
OneDev
OpenAPIHub
Python
Spark NLP
Swagger
XML

Pricing Details

Free
Free Trial
Free Version

Pricing Details

$50,000.00/one-time
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

PyPI

Website

pypi.org/project/APIFuzzer/

Vendor Details

Company Name

Beyond Security (Fortra)

Founded

1999

Country

United States

Website

beyondsecurity.com/solutions/bestorm-dynamic-application-security-testing.html

Product Features

Product Features

Automated Testing

Hierarchical View
Move & Copy
Parameterized Testing
Requirements-Based Testing
Security Testing
Supports Parallel Execution
Test Script Reviews
Unicode Compliance

Software Testing

Automated Testing
Black-Box Testing
Dynamic Testing
Issue Tracking
Manual Testing
Quality Assurance Planning
Reporting / Analytics
Static Testing
Test Case Management
Variable Testing Methods
White-Box Testing

Alternatives

Alternatives

Mayhem Reviews

Mayhem

ForAllSecure
go-fuzz Reviews

go-fuzz

dvyukov
Peach Fuzzer Reviews

Peach Fuzzer

Peach Tech
NeoLoad Reviews

NeoLoad

Tricentis